simple_openid_connect.flows.client_credentials_grant#

The *Client Credentials Grant* (sometimes called Service Account Authentication) implementation.

This grant enables a client to retrieve tokens dedicated to the client and not to a specific user.

Functions

authenticate(token_endpoint, scope, ...)

Retrieve a token that is dedicated to the authenticated client from the provider.

simple_openid_connect.flows.client_credentials_grant.authenticate(token_endpoint: str, scope: str, client_authentication: ClientAuthenticationMethod) → TokenSuccessResponse | TokenErrorResponse#

Retrieve a token that is dedicated to the authenticated client from the provider.

Parameters:

token_endpoint – The endpoint of the OP at which tokens can be exchanged. Corresponds to ProviderMetadata.token_endpoint.
scope – The scope requested by the application.
client_authentication – A way for the client to authenticate itself.

Returns:

The result of the exchange

Modules